Privacy Notice
This notice explains how Mallflare handles personal information when you browse the store, create an account, use Google or Facebook sign-in, place an order, or contact us.
Who is responsible
Mallflare operates this online store. Questions and privacy requests can be sent to [email protected].
Information we collect
- Account and contact information: name, email address, password hash, social sign-in provider and provider account identifier, phone number, and saved addresses.
- Order and transaction information: cart contents, order history, shipping address, payment status, refunds, support records, and shipping or tracking events. Payment providers process the underlying payment credentials.
- Device and usage information: IP address, browser and device details, session identifiers, security logs, pages viewed, and interactions needed to operate, protect, and improve the store.
- Communications: messages, photos, and other information you send through support, return, review, or privacy requests.
How we receive information
We receive information directly from you, automatically from your browser, and from service providers involved in sign-in, payment, fraud prevention, warehousing, packing, delivery, hosting, and customer support. If you choose Google or Facebook sign-in, we request the basic account information needed to identify the account, normally your provider identifier, name, and email address.
How we use information
- Provide accounts, carts, checkout, payments, order history, returns, refunds, and customer support.
- Quote shipping, ship and track orders, and communicate service or security updates.
- Prevent fraud, abuse, unauthorized access, and payment disputes.
- Maintain records, comply with law, enforce our terms, and establish or defend legal claims.
- Measure and improve store reliability, usability, and product availability.
When we disclose information
We disclose only the information reasonably needed to providers that help us run the store, including hosting, email, social sign-in, payment, security, analytics, warehousing, packing, customs, and delivery carriers. We may also disclose information in a business transfer, when required by law, or when reasonably necessary to protect customers, Mallflare, or others.
We do not sell personal information. When advertising measurement tags are enabled, we share store event data such as page views, product views, cart activity, and completed purchases with Google and Meta so we can measure ads and show catalog product ads. In some US states this may be treated as sharing for cross-context behavioral advertising. You can limit nonessential technologies with browser controls and, where the store provides them, cookie preferences.
Cookies and similar technologies
We use necessary cookies for sessions, carts, security, preferences, and account access. Optional analytics or other nonessential technologies are used only when enabled and described in our Cookie Notice. Google or Facebook may set or read their own technologies when you choose their sign-in option.
Retention
Retention depends on why the information is needed. Account information is generally kept while the account remains active. Order, payment, tax, fraud, dispute, and support records may be kept longer to meet operational and legal obligations. We delete or de-identify information when it is no longer reasonably needed, subject to backups and records we must retain.
Security
We use administrative, technical, and organizational safeguards designed for the nature of the information. No online service can guarantee absolute security. Use a unique password and contact us promptly if you believe an account or order has been accessed without authorization.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, or to appeal a denied request. You can update common account details after signing in. For other requests, email [email protected]. We may verify the request and retain information when the law permits or requires it. See our Data Deletion Instructions for account deletion steps.
Children
The store is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. A parent or guardian who believes a child provided information should contact us.
International processing
Our warehouses, carriers, and other service providers may process information in countries other than the one where you live. We use providers and contractual arrangements appropriate to the services involved and applicable legal requirements.
Changes and contact
We may update this notice when our practices or legal obligations change. The effective date above identifies the current version. Contact [email protected] with privacy questions or requests.